setfacl, acl, extended attributes for NFS exports. file acls not set on destination according to setfacl information for dirs.

[jofergus]

Which version of the AzCopy was used?

azcopy version 10.22.0

Which platform are you using? (ex: Windows, Mac, Linux)

Linux ubuntu 20.04

What command did you run?

azcopy cp https://jofergushsm.blob.core.windows.net/data/debughost.log /lustre/tmp/test/

What problem was encountered?

When files are azcopied to /lustre/tmp/test/ they should the default acl for when a file is created. For example:
jofergus@jofergus-lustre-client1:/lustre/tmp/test$ touch testfile
jofergus@jofergus-lustre-client1:/lustre/tmp/test$ ll
total 8
drwxrwxrw-+ 2 jofergus jofergus 4096 Jan 4 20:31 ./
drwxrwxrwx+ 3 jofergus jofergus 4096 Jan 4 16:18 ../
-rw-rw-rw- 1 jofergus jofergus 0 Jan 4 20:31 testfile
jofergus@jofergus-lustre-client1:/lustre/tmp/test$
Note the rw-rw-rw- permissions above. Next I will azcopy a single file to the same dir and I expect it to have the same, rw-rw-rw-, permission.
jofergus@jofergus-lustre-client1:/lustre/tmp/test$ ll
total 6288
drwxrwxrw-+ 2 jofergus jofergus 4096 Jan 4 20:34 ./
drwxrwxrwx+ 3 jofergus jofergus 4096 Jan 4 16:18 ../
-rw-r--r-- 1 jofergus jofergus 6429601 Jan 4 20:34 debughost.log
-rw-rw-rw- 1 jofergus jofergus 0 Jan 4 20:31 testfile
jofergus@jofergus-lustre-client1:/lustre/tmp/test$

How can we reproduce the problem in the simplest way?

use acl on an nfs mount. acl = extended attributes. install acl on a linux host with:
sudo apt-get install acl

Have you found a mitigation/solution?

NO

[vibhansa-msft]

Copying to/from blob does not preserve the ACLs or permissions. Flat namespace accounts do not have any backend support for permissions/uid/gid. File created on local file-system will show the default permissions only.

[jofergus]

Vikas - thank you for the response. The file created on the local file system is NOT showing the default permission once it is copied from blob. The default permissions were changed with setfacl to rw-rw-rw-. When I create a file outside of azcopy it will have those permissions (rw-rw-rw-). But when a file arrives via azcopy the permissions are rw-r--r-- ??